Dell SonicWALL NSA 5600 User manual

Getting Started Guide
Dell SonicWALL Network Security Appliances
NETWORK SECURITY NSA 5600 / 4600 / 3600

| 1
Notes, Cautions, and Warnings
© 2013 Dell, Inc.
Trademarks: Dell™, the DELL logo, SonicWALL™, SonicWALL GMS™, SonicWALL Analyzer™, Reassembly-Free Deep Packet
Inspection™, Dynamic Security for the Global Network™, SonicWALL Network Security Appliances, SonicWALL Dynamic Support
24x7™, SonicWALL Comprehensive Gateway Security Suite™, SonicWALL McAfee Client/Server Anti-Virus Suite™, and all other
SonicWALL product and service names and slogans are trademarks of Dell, Inc.
Microsoft Windows, Internet Explorer, and Active Directory are trademarks or registered trademarks of Microsoft Corporation.
Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
2013 – 04 P/N 232-002214-50 Rev. A
NOTE: A NOTE indicates important information that helps you make better use of your system.
CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

2| In this Guide
In this Guide
The Dell SonicWALL NSA 5600/4600/3600 appliances are designed to be the most scalable, reliable, and best performing multifunction
appliances in their class.
This Getting Started Guide provides instructions for basic installation and configuration of the Dell SonicWALL NSA 5600/4600/3600.
Chapter 1 Sections Include
Introduction to the NSA Appliances, page 5 •NSA 5600/4600/3600 Package Contents, page 6
•The Front Panel, page 7
•The Back Panel, page 8
•Using this Getting Started Guide, page 9
•Using MySonicWALL, page 10
•Creating a MySonicWALL Account, page 10
Chapter 2 Sections Include
Configuring the Appliance, page 11 •Determining the WAN Type, page 12
•System Requirements, page 12
•Recording Configuration Information, page 13
•Initial Setup, page 14
•Troubleshooting & Testing Your Connections, page 17

In this Guide | 3
Additional Information
The following sections provide addition information for the Dell SonicWALL NSA 5600/4600/3600 appliances.
•Support and Training Options, page 41
•Rack Mounting Instructions, page 45
•Product Safety and Regulatory Information, page 51
Chapter 3 Sections Include
Registering, Licensing, and Upgrading, page 19 •Registering Overview, page 20
•Registering in SonicOS, page 20
•Alternative Registration Options, page 21
•Security Services and Software, page 22
•Activating & Managing Licenses Using MySonicWALL, page 23
•Upgrading Firmware, page 24
Chapter 4 Sections Include
Deployment Scenarios, page 27 •Advanced Deployment Scenarios, page 28
•Configuring NAT Mode Gateway, page 32
•Configuring a Stateful HA Pair, page 33
•Configuring L2 Bridge Mode, page 39

4| In this Guide

| 5
Introduction to the NSA Appliances
In this Section:
This section describes the items shipped with the Dell SonicWALL NSA 5600/4600/3600 appliance, provides front and rear illustrations of
the NSA appliance, and explains how to create a MySonicWALL account.
•NSA 5600/4600/3600 Package Contents, page 6
•The Front Panel, page 7
•The Back Panel, page 8
•Using this Getting Started Guide, page 9
•Using MySonicWALL, page 10
•Creating a MySonicWALL Account, page 10
1

6| NSA 5600/4600/3600 Package Contents
NSA 5600/4600/3600 Package Contents
Before you begin the setup process, verify that your package contains the following items:
1. One Dell SonicWALL NSA 5600/4600/3600 appliance
2. One Rack Mounting Kit
3. One serial CLI cable
4. One Ethernet cable
5. One power cord*
6. One Dell SonicWALL NSA 5600/4600/3600 Getting Started Guide
*The included power cord is approved for use only in specific countries or regions. Before using a power cord, verify that it is rated and approved for use in your location. The
power cord is for AC mains installation only. See Safety and Regulatory Information for more information.
Missing Items? If any items are missing from your package, contact Dell SonicWALL Support:
Web: http://www.sonicwall.com/us/Support.html
Email: [email protected]
Getting Started Guide
Dell SonicWALL Network Security Appliance
NE T WORK SECURIT Y NSA 5600 / 4600 / 3600
1
45
6
3
2
SonicWALL NSA 5600
CONSOLE
SDHC
MGMT
X17
X16 X14 X12 X10 X8 X6 X4
1GE
10GE
X2 X0
X1X3X5X7
X9X11X13X15
M0
ALARM
TEST
PWR

The Front Panel | 7
The Front Panel
SonicWALL NSA 5600
CONSOLE
SDHC
MGMT
X17
X16 X14 X12 X10 X8 X6 X4
1GE
10GE
X2 X0
X1X3X5X7
X9X11X13X15
ALARM
M0
TEST
PWR
Console Port
USB Ports (2)
Reset Button
LED Indicators
Management Port
X0-X11 (1 GE)
Access the SonicOS Command Line
Interface (CLI) via the enclosed serial
CLI cable
For 3G/4G/Analog modem adaptor support
Press and hold for several seconds to
set the appliance into Safe Mode. High-speed copper
Gigabit Ethernet ports
Power: Blue: Indicates power supply is operating correctly
Yellow: Indicates power supply is disconnected
Test: Quick Blinking Yellow: Initializing
Slow Blinking Yellow: SafeMode
Solid Yellow: Test mode
Alarm: Indicates alarm activity in Red LED
M0: Indicates Expansion Module 0 activity in Red LED
1 Gigabit Ethernet Management Interface
SDHC Port
Secure Digital High-Capacity (SDHC)
port for future use
X12-X15 (1 GE SFP)
X16-X17 (10 GE SFP+)
1 Gigabit Ethernet hot-pluggable
SFP interfaces for high-speed fiber or
copper Ethernet communication
10 Gigabit Ethernet hot-pluggable ports

8| The Back Panel
The Back Panel
Note: See the Safety and Regulatory Information section, on page 52 for important additional information on power supply
requirements for the Dell SonicWALL NSA 5600/4600/3600 appliance.
I
o
Expansion Bay
Fans (2)
Power Supply
For Dell SonicWALL-approved
expansion modules
Dual auto-throttling fans for system
temperature control
Provides power to the Dell SonicWALL
appliance by plugging in the AC adaptor and
switching the appliance on

Using this Getting Started Guide | 9
Using this Getting Started Guide
The following flow chart illustrates the necessary steps in the process of getting started with your new Dell SonicWALL NSA 5600/4600/
3600 appliance.

10 | Using MySonicWALL
Using MySonicWALL
Dell SonicWALL requires a MySonicWALL account prior to
configuring your appliance. If you already have a
MySonicWALL account, you can continue to the Configuring
the Appliance section, on page 11.
MySonicWALL is used during registration of your
Dell SonicWALL appliance and to activate or purchase licenses
for security services, support, or software specific to your
Dell SonicWALL device.
For a High Availability configuration, MySonicWALL provides a
way to associate a backup unit that can share security service
licenses with your primary appliance.
Note: MySonicWALL registration information is not sold or
shared with any other company.
Creating a MySonicWALL Account
A MySonicWALL account is required in order to register the
NSA 5600/4600/3600 appliance. Create a new MySonicWALL
account from any computer by navigating to:
<http://www.mysonicwall.com>.
To create a MySonicWALL account:
1. In your Web browser, navigate to
<http://www.mysonicwall.com>.
2. In the login screen, click the Register Now link.
3. Complete the Registration form, and then click Register.
4. Verify that the information is correct, and then click
Submit.
5. To confirm your account was created, click Continue.

11
Configuring the Appliance
In this Section:
This section provides an overview of available WAN types, a section to record configuration information, and initial setup information and
procedures.
•Determining the WAN Type, page 12
•System Requirements, page 12
•Recording Configuration Information, page 13
•Initial Setup, page 14
•Troubleshooting & Testing Your Connections, page 17
2

12 | Determining the WAN Type
Determining the WAN Type
Before configuring your NSA appliance, you will need to
determine the type of WAN connection your setup will use.
Dell SonicWALL supports the following types:
•Static—Configures the appliance for a network that uses
static IP addresses.
•DHCP—Configures the appliance to request IP settings from
a DHCP server on the Internet.
•PPPoE—Point-to-Point Protocol over Ethernet (PPPoE) is
typically used with a DSL modem. If your ISP requires
desktop software, a username, and password, select NAT
with PPPoE mode.
•PPTP—Point-to-Point Tunneling Protocol (PPTP) is used to
connect to a remote server. PPTP typically supports older
Microsoft Windows implementations requiring tunneling
connectivity.
Note: For more information regarding other WAN types, such
as Layer 2 Tunneling Protocol (L2TP), Wire Mode, or
Tap Mode, please refer to the SonicOS Administrator’s
Guide.
System Requirements
Before beginning the setup process, verify that you have:
• An Internet connection
• A Web browser supporting Java Script and HTTP uploads.
Accepted Browser Browser Version Number
Internet Explorer 8.0 and higher
Chrome 18.0 and higher
Firefox 16.0 and higher
Safari 5.0 and higher

Recording Configuration Information | 13
Recording Configuration Information
Use this section to record your configuration information. Be
sure to keep for future reference.
Registration Information
Networking Information
Administrator Information
Internet Service Provider (ISP) Information
Record the following information about your current Internet
service:
Serial Number: Record the serial number found on
the bottom panel of your
Dell SonicWALL appliance.
Authentication Code: Record the authentication code found
on the bottom panel of your
Dell SonicWALL appliance.
LAN IP Address:
_____._____._____._____
Select a static IP address for your
Dell SonicWALL appliance that is
within the range of your local network.
Subnet Mask:
_____._____._____._____
Record the subnet mask for the local
subnet where you are installing your
Dell SonicWALL appliance.
Ethernet WAN IP Address:
_____._____._____._____
Select a static IP address for your
Ethernet WAN. This setting only
applies if you are already using an
ISP that assigns a static IP address.
Admin Name: Select an administrator account name.
(default is admin)
Admin Password: Select an administrator password.
(default is password)
If you are
connecting with
DHCP
No information is usually required. However,
some providers may require a Host Name:
_________________________________
If you are
connecting with
Static IP
IP Address: _____._____._____._____
Subnet Mask:_____._____._____._____
Default Gateway: _____._____._____._____
Primary DNS: _____._____._____._____
DNS 2 (optional): _____._____._____._____
DNS 3 (optional): _____._____._____._____

14 | Initial Setup
Initial Setup
This section provides initial configuration information and
instructions for connecting your Dell SonicWALL NSA 5600/
4600/3600 appliance. See the following sections:
•Connecting the LAN Port, page 14
•Connecting the WAN Port, page 14
•Applying Power to the NSA 5600/4600/3600, page 15
•Accessing the Management Interface & Setup Wizard,
page 16
•Testing Your WAN Connection, page 17
Connecting the LAN Port
1. Using the provided Ethernet cable, connect one end of the
cable to the computer you are using to manage the
Dell SonicWALL NSA appliance.
2. Connect the other end of the Ethernet cable to the X0
(LAN) port on your Dell SonicWALL NSA appliance.
Connecting the WAN Port
1. Connect one end of an Ethernet cable to your Internet
connection.
2. Connect the other end of the Ethernet cable to the X1
(WAN) port on your Dell SonicWALL NSA appliance.

Initial Setup | 15
Applying Power to the NSA 5600/4600/3600
Connect the power cord from the Dell SonicWALL NSA
appliance into appropriate power outlet.
For further information regarding power requirements, refer to
the Product Safety and Regulatory Information section, on
page 51 this document.
NSA 5600/4600/3600 LED Activity
The Power LEDs on the front panel illuminate blue when the
appliance is powered on.
The Link LED above the X0 port illuminates green or amber
depending on the link throughput speed, indicating an active
connection:
• Amber indicates 1 Gbps
• Green indicates 100 Mbps
• An unlit left LED with the right LED lit indicates 10 Mbps
The Test LED or Alarm LED may illuminate and blink while the
appliance performs a series of diagnostic tests. When these
LEDs are no longer illuminated and the Power LEDs remain
steadily lit, the Dell SonicWALL NSA 5600/4600/3600 appliance
is ready for configuration. This typically occurs within a few
minutes of connecting the power.
If the Test or Alarm LEDs remain lit after the NSA 5600/4600/
3600 has completed powering on, restart the appliance by
disconnecting the power, waiting 1 minute, then connecting the
power again.

16 | Initial Setup
Accessing the Management Interface &
Setup Wizard
Once the NSA appliance is ready to be configured, ensure that
the computer you will use to manage the appliance is set up to
accept a dynamic IP address, or that it has an unused IP
address on the 192.168.168.x/24 subnet, such as
192.168.168.20.
Note: Be sure to disable pop-up blocking software, or set your
Web browser to allow pop-ups and cookies.
To access the SonicOS management interface, follow the steps
listed:
1. Start your Web browser and navigate to the default LAN
management IP address: <http://192.168.168.168>.
2. Launch the Dell SonicWALL Setup Wizard by clicking the
first Here link.
This wizard helps you quickly configure the
Dell SonicWALL appliance to secure your Internet
connection.
3. Follow the on-screen prompts to complete the
Dell SonicWALL Setup Wizard.
4. A Setup Wizard Summary page displays at the end of the
wizard. Verify the information you’ve entered is correct,
then click Apply.
5. Once completed, a Setup Wizard Completion notice
displays.
Click the Here link to begin the registration process on the
SonicOS management interface.

Troubleshooting & Testing Your Connections | 17
Troubleshooting & Testing Your
Connections
The following sections can be used to troubleshoot and test
your LAN and WAN connections.
Troubleshooting Your LAN Connection
If you cannot connect to the Dell SonicWALL NSA 5600/4600/
3600 or the Setup Wizard does not display, consider the
following:
• Did you correctly enter the Dell SonicWALL NSA 5600/4600/
3600 management IP address in your Web browser?
• Did you try restarting your management station while it is
connected to the Dell SonicWALL appliance?
• Are the Local Area Connection settings on your computer set
to use DHCP or set to a static IP address on the
192.168.168.x/24 subnet?
• Do you have the Ethernet cable connected to your computer
and to the X0 (LAN) port on your appliance?
• Is the connector clip on your network cable properly seated in
the port of the security appliance?
Testing Your WAN Connection
Use the following steps to test your WAN connection:
1. After you exit the Setup Wizard, the login page reappears.
Log back into the SonicOS management interface and
verify your IP and WAN connection.
2. Open a command prompt window on your computer and
enter the command: ping sonicwall.com
3. Open another Web browser and navigate to:
<http://www.sonicwall.com>.
If you can view the Dell SonicWALL home page, you have
configured your Dell SonicWALL NSA 5600/4600/3600
correctly.
If you cannot view the Dell SonicWALL home page, renew your
management station DHCP address.
If you still cannot view a Web page, try one of these solutions:
• Restart your management station to accept new network
settings from the DHCP server in the Dell SonicWALL
appliance.
• Restart your Internet router to communicate with the DHCP
client in the Dell SonicWALL appliance.
Note: WAN connectivity issues are unrelated to completion of
the MySonicWALL Registration process.

18 | Troubleshooting & Testing Your Connections